---
apiVersion: networking.k8s.io/v1
items:
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      capability.openshift.io/name: CloudCredential
      include.release.openshift.io/ibm-cloud-managed: "true"
      include.release.openshift.io/self-managed-high-availability: "true"
    creationTimestamp: "2026-10-30T01:22:19Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:capability.openshift.io/name: {}
            f:include.release.openshift.io/ibm-cloud-managed: {}
            f:include.release.openshift.io/self-managed-high-availability: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"8e7c8ca4-3b7d-4117-bed8-cfce6ed6dd76"}: {}
        f:spec:
          f:egress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: cluster-version-operator
      operation: Update
      time: "2026-10-30T01:22:19Z"
    name: allow-egress
    namespace: openshift-cloud-credential-operator
    ownerReferences:
    - apiVersion: config.openshift.io/v1
      controller: true
      kind: ClusterVersion
      name: version
      uid: 8e7c8ca4-3b7d-4117-bed8-cfce6ed6dd76
    resourceVersion: "1263"
    uid: 99ef2615-0ec3-4258-a04e-fdbecc7e1f1d
  spec:
    egress:
    - ports:
      - endPort: 65535
        port: 1
        protocol: TCP
    - ports:
      - endPort: 65535
        port: 1
        protocol: UDP
    podSelector:
      matchExpressions:
      - key: app
        operator: In
        values:
        - cloud-credential-operator
        - pod-identity-webhook
    policyTypes:
    - Egress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      capability.openshift.io/name: CloudCredential
      include.release.openshift.io/ibm-cloud-managed: "true"
      include.release.openshift.io/self-managed-high-availability: "true"
    creationTimestamp: "2026-10-30T01:22:20Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:capability.openshift.io/name: {}
            f:include.release.openshift.io/ibm-cloud-managed: {}
            f:include.release.openshift.io/self-managed-high-availability: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"8e7c8ca4-3b7d-4117-bed8-cfce6ed6dd76"}: {}
        f:spec:
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: cluster-version-operator
      operation: Update
      time: "2026-10-30T01:22:20Z"
    name: allow-ingress-metrics
    namespace: openshift-cloud-credential-operator
    ownerReferences:
    - apiVersion: config.openshift.io/v1
      controller: true
      kind: ClusterVersion
      name: version
      uid: 8e7c8ca4-3b7d-4117-bed8-cfce6ed6dd76
    resourceVersion: "1366"
    uid: 325fcbd4-7972-43d5-901a-f34010814e1c
  spec:
    ingress:
    - ports:
      - port: 8443
        protocol: TCP
    podSelector:
      matchExpressions:
      - key: app
        operator: In
        values:
        - cloud-credential-operator
    policyTypes:
    - Ingress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      capability.openshift.io/name: CloudCredential
      include.release.openshift.io/ibm-cloud-managed: "true"
      include.release.openshift.io/self-managed-high-availability: "true"
    creationTimestamp: "2026-10-30T01:22:21Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:capability.openshift.io/name: {}
            f:include.release.openshift.io/ibm-cloud-managed: {}
            f:include.release.openshift.io/self-managed-high-availability: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"8e7c8ca4-3b7d-4117-bed8-cfce6ed6dd76"}: {}
        f:spec:
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: cluster-version-operator
      operation: Update
      time: "2026-10-30T01:22:21Z"
    name: allow-ingress-pprof
    namespace: openshift-cloud-credential-operator
    ownerReferences:
    - apiVersion: config.openshift.io/v1
      controller: true
      kind: ClusterVersion
      name: version
      uid: 8e7c8ca4-3b7d-4117-bed8-cfce6ed6dd76
    resourceVersion: "1477"
    uid: c5fbca0b-adce-48ee-81c6-f402a8af0302
  spec:
    ingress:
    - ports:
      - port: 6060
        protocol: TCP
    podSelector:
      matchExpressions:
      - key: app
        operator: In
        values:
        - cloud-credential-operator
    policyTypes:
    - Ingress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      capability.openshift.io/name: CloudCredential
      include.release.openshift.io/ibm-cloud-managed: "true"
      include.release.openshift.io/self-managed-high-availability: "true"
    creationTimestamp: "2026-10-30T01:22:22Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:capability.openshift.io/name: {}
            f:include.release.openshift.io/ibm-cloud-managed: {}
            f:include.release.openshift.io/self-managed-high-availability: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"8e7c8ca4-3b7d-4117-bed8-cfce6ed6dd76"}: {}
        f:spec:
          f:ingress: {}
          f:podSelector: {}
          f:policyTypes: {}
      manager: cluster-version-operator
      operation: Update
      time: "2026-10-30T01:22:22Z"
    name: allow-ingress-webhook
    namespace: openshift-cloud-credential-operator
    ownerReferences:
    - apiVersion: config.openshift.io/v1
      controller: true
      kind: ClusterVersion
      name: version
      uid: 8e7c8ca4-3b7d-4117-bed8-cfce6ed6dd76
    resourceVersion: "1591"
    uid: 6d30bac1-fe88-4232-8d3c-8dd747aa4426
  spec:
    ingress:
    - ports:
      - port: 9443
        protocol: TCP
    podSelector:
      matchExpressions:
      - key: app
        operator: In
        values:
        - pod-identity-webhook
    policyTypes:
    - Ingress
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    annotations:
      capability.openshift.io/name: CloudCredential
      include.release.openshift.io/ibm-cloud-managed: "true"
      include.release.openshift.io/self-managed-high-availability: "true"
    creationTimestamp: "2026-10-30T01:22:23Z"
    generation: 1
    managedFields:
    - apiVersion: networking.k8s.io/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:capability.openshift.io/name: {}
            f:include.release.openshift.io/ibm-cloud-managed: {}
            f:include.release.openshift.io/self-managed-high-availability: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"8e7c8ca4-3b7d-4117-bed8-cfce6ed6dd76"}: {}
        f:spec:
          f:policyTypes: {}
      manager: cluster-version-operator
      operation: Update
      time: "2026-10-30T01:22:23Z"
    name: default-deny
    namespace: openshift-cloud-credential-operator
    ownerReferences:
    - apiVersion: config.openshift.io/v1
      controller: true
      kind: ClusterVersion
      name: version
      uid: 8e7c8ca4-3b7d-4117-bed8-cfce6ed6dd76
    resourceVersion: "1665"
    uid: 38a8a1af-94cf-4f82-8d4a-4a68283d8a5c
  spec:
    podSelector: {}
    policyTypes:
    - Ingress
    - Egress
kind: NetworkPolicyList
metadata:
  resourceVersion: "201945"